New Portal Helps Devs Spot Malicious Open Source Packages

ReversingLabs announces the Spectra Assure Community portal, offering free assessments of over 5 million npm, PyPI, and RubyGems packages using advanced threat detection and comprehensive binary analysis to identify malware, tampering, secrets, vulnerabilities, and licensing issues. The portal helps developers and security teams rapidly evaluate package security, compare versions, and make auditable decisions, citing the 2023 "Operation Brainleeches" npm campaign as an example of the supply chain threats it can help detect.